Windows 4.3.26 Specifically for errors due to Security

Discussions related to using VirtualBox on Windows hosts.
MikeDiack
Posts: 75
Joined: 20. Mar 2009, 15:57
Primary OS: MS Windows 8.1
VBox Version: PUEL
Guest OSses: Win 10, Win 7, XP, Linux, Win 8.1, Win 2000, Win NT 4
Location: UK

Re: Windows 4.3.26 Specifically for errors due to Security

Post by MikeDiack »

Quick update from me, following my earlier post about VBox 4.3.26 r98988 running on Windows 8.1 x64 and Windows 7 SP1 x64 hosts, having tried both Comodo Internet Security 8.1 and Symantec Endpoint Protection 12.1 RU5 on both host systems. Both hosts are fully patched according to Windows Update.
In both cases, the host systems are able to run Linux (x86), Windows XP (x86) and Window 7 (x64) and Windows 10 (x64) guest PCs without a problem.
rascboy
Posts: 2
Joined: 23. Mar 2015, 20:15

Re: Windows 4.3.26 Specifically for errors due to Security

Post by rascboy »

Not sure if this is the right place to post but after updating my Virtualbox from 4.3.12 to 4.3.26 I'm unable to start any VMs.

Host OS: Windows Server 2012 R2
Guest OS: Different versions of Windows ranging from Windows 7 to Windows Server 2012

I've attached logs for one of the VMs as they're identical to the other ones.

Thanks!
Attachments
VBoxStartup.zip
Startup logs
(3.15 KiB) Downloaded 51 times
mpack
Site Moderator
Posts: 39156
Joined: 4. Sep 2008, 17:09
Primary OS: MS Windows 10
VBox Version: PUEL
Guest OSses: Mostly XP

Re: Windows 4.3.26 Specifically for errors due to Security

Post by mpack »

I'm not sure if your problem is security related or not: the error in the log is "file not found", rather than any security issue, so I would suspect that you've simply botched the installation somehow. I would suggest uninstalling VBox and reinstalling, as the correct user, while using "Run as administrator" to run the installer.
rascboy
Posts: 2
Joined: 23. Mar 2015, 20:15

Re: Windows 4.3.26 Specifically for errors due to Security

Post by rascboy »

Okay, I'll give that a shot. Thanks!
numb3rs666
Posts: 22
Joined: 30. Dec 2013, 18:14

Re: Windows 4.3.26 Specifically for errors due to Security

Post by numb3rs666 »

SO Host: Win 8.1
Security: Comodo
SO Guest: Win 8.1

Version 4.3.27-99222 same problems of previous. Last working 4.3.24-98716

Log attached

Thanks for your work
Attachments
VBoxStartup.zip
(15.87 KiB) Downloaded 45 times
RobVT
Posts: 2
Joined: 27. Mar 2015, 15:28
Primary OS: MS Windows other
VBox Version: OSE other
Guest OSses: Win*, *nix

Re: Windows 4.3.26 Specifically for errors due to Security

Post by RobVT »

I recently received a new PC and reinstalled 4.3.12 on it. I was having some issues with VMs hanging, so i decided to try to upgrade to 4.3.26.

4.3.26 is producing a BSOD (attached). It's pointing at dgmaster.sys which is Digital Guardian.

Host OS: Win 7 x64 Pro
AV: McAfee 8.8
FW: McAfee HIPS 8.0
Other: Digital Guardian (unknown version, it's essentially hidden from view on this corporate image)
Other: Tanium Client v6 (not 100% sure what this does, but mentioning it just in case it's useful)

After the first BSOD I installed KB 3004394 but that did not solve the problem.

Next I install the test build, 4.3.27r99222. It's no longer BSODing, but now VMs won't launch stating the driver is "stuck starting/stopping" (screenshots attached).

I've reverted back to 4.3.12 for now.

Attached are BSOD image, minidump and VBoxStartup.log for 4.3.26 and screenshots of errors and VBoxStartup.log for 4.3.27.
Attachments
4.3.27r99222.zip
4.3.27 logs and screenshots
(99.15 KiB) Downloaded 40 times
4.3.26r98988.zip
4.3.26 logs, minidump and BSOD pic.
(187.62 KiB) Downloaded 36 times
odo
Posts: 2
Joined: 28. Mar 2015, 12:25

Re: Windows 4.3.26 Specifically for errors due to Security

Post by odo »

Hi. I have a problem and i dont know how solve.

Failed to open a session for the virtual machine epc.

Unable to load R3 module C:\Program Files\Oracle\VirtualBox/VBoxDD.DLL (VBoxDD): GetLastError=1790 (VERR_UNRESOLVED_ERROR).

Result Code: E_FAIL (0x80004005)
Component: Console
Interface: IConsole {8ab7c520-2442-4b66-8d74-4ff1e195d2b6}

R3HardNtChildWaitFor[1]: Quitting: ExitCode=0x0 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 17911 ms, the end);


1. Windows 7 sp3
2. Is attached
3. Avira internet security

Another colleague he says than problem comes from: "00:00:09.215844 supR3HardenedErrorV: supR3HardenedScreenImage/LdrLoadDll: cached rc=VERR_LDRVI_NOT_SIGNED fImage=1 fProtect=0x0 fAccess=0x0 cHits=512 \Device\HarddiskVolume2\Windows\System32\uxtheme.dll
00:00:09.216097 supR3HardenedErrorV: supR3HardenedMonitor_LdrLoadDll: rejecting 'C:\Windows\system32\uxtheme.dll' (C:\Windows\system32\uxtheme.dll): rcNt=0xc0000190"
Attachments
VBoxStartup.rar
(16.39 KiB) Downloaded 35 times
AWurlitzer
Posts: 1
Joined: 28. Mar 2015, 18:24

Re: Windows 4.3.26 Specifically for errors due to Security

Post by AWurlitzer »

Hi,

I just reinstalled my PC and installed VirtualBox. When I try to start an imported virtual machine, I get this message:
Integrity error (0xe986f166/- 3738): Found evil handle to budding VM process: pid=0000000000000004 h=00000000000044b8 acc=0x1fffff attr=0x0 type=process [System] (rc=-3738)

Please try reinstalling VirtualBox.
Code d'erreur : E_FAIL (0x80004005)
Composant : Machine
Interface : IMachine {480cf695-2d8d-4256-9c7c-cce4184fa048}
OS: Windows 7 x64 SP1
AntiVirus: Kaspersky Total Security v15.0.2.361 (a)

Thanks in advance for your help.
Attachments
VBoxStartup.zip
(12.33 KiB) Downloaded 79 times
cmiles
Posts: 1
Joined: 29. Mar 2015, 01:06

Re: Windows 4.3.26 Specifically for errors due to Security

Post by cmiles »

Failed to open a session for the virtual machine gentoo-web-provision_default_1427586278460_8476.

Unable to load R3 module C:\Program Files\Oracle\VirtualBox/VBoxDD.DLL (VBoxDD): GetLastError=1790 (VERR_UNRESOLVED_ERROR).

Result Code: E_FAIL (0x80004005)
Component: Console
Interface: IConsole {8ab7c520-2442-4b66-8d74-4ff1e195d2b6}
  • Virtualbox:[/b] 4.3.22 and 4.3.26
  • Vagrant: 1.6.5 and 1.7.2
  • OS:Windows 7 Ultimate SP1 64bit will all updates
  • Virus scanner: Microsoft Security Essentials
  • Firewall: None
  • Windows skinning modification: None. But previously had Stardock WindowFX which I uninstalled just to be sure.
When it started:
This issue stated today for no apparent reason. I ran `vagrant up` and all my boxes were failing to start. I had version 4.3.20 installed when it started, which I have been running since Feb 15. I can't recall making any changes to the system to trigger this.

What I haved tried
  • I read that modified UXTheme.dll can cause this. I haven't done that, but I have had Stardock WindowFX isntalled since Nov 2014. So I have uninstalled it just to be sure.
  • I have upgraded Virtualbox to 4.3.26
  • I uninstalled Virtualbox and rebooted, and then re-installed.
  • Vagrant is creating the virtualbox, so I have upgraded it from 1.6.3 to 1.7.2.
I'm sure this is a big deal for a lot of people. It's a huge deal for me because we are heavily invested in Vagrant and Virtualbox and I have to explain to my boss that I can't do my job until I can get an alternative system in place.

UPDATE - problem solved!
Whilst I said I had not modified my uxtheme.dll, I was obviously lying.

The attached log included mention of the file:
... '\Device\HarddiskVolume2\Windows\System32\uxtheme.dll' is most likely modified.
... rejecting 'C:\Windows\system32\uxtheme.dll'
When I checked, it seems 3 years ago I must have tried out some custom themes. And fortunately I had made a backup of the file.
gtgtgtg
Posts: 2
Joined: 11. Apr 2014, 06:27

Re: Windows 4.3.26 Specifically for errors due to Security

Post by gtgtgtg »

1) Windows 2008 R2(SP1) all latest update, newly installed OS
2) VBoxStartup.log
VBoxStartup.zip
(16.96 KiB) Downloaded 33 times
3) No anti-virus, firewalls.

Tried 4.3.26 & the test build (4.3.27 r99265), both encountered the same issue

Once I click the "start" button.
it crashes.
1.png
1.png (20.71 KiB) Viewed 9666 times
2.png
2.png (25.1 KiB) Viewed 9666 times
dk
Posts: 1
Joined: 30. Mar 2015, 18:04

Re: Windows 4.3.26 Specifically for errors due to Security

Post by dk »

Hello,

After bumping into error in supR3HardenedWinReSpawn I found this topic. Downgrading to 4.3.12 works, but I hope you can use the data I collected meanwhile
on the latest build.

Thank you!
Attachments
VBoxStartup.log.zip
(9.27 KiB) Downloaded 31 times
Balaji Sivaraman
Posts: 1
Joined: 30. Mar 2015, 18:13

Re: Windows 4.3.26 Specifically for errors due to Security

Post by Balaji Sivaraman »

1) Windows 8.1, with all the latest updates installed from Windows Update. Though I've seen the same issue occur when I briefly switched to Windows 10 Technical Preview Build 9926 and 10022 as well.
2) VBoxStartup.log
VBoxStartup.7z
VBox Logs Folder
(21.05 KiB) Downloaded 31 times
3) I have installed Stardock's Start8 recently, though I've seen the same issue in vanilla Windows 8 as well. The only security related applications I use are Windows Firewall and Windows Defender.
4) I tried out the latest test build 4.3.27 (99282), and it doesn't help. (The attached logs are for this build only.)
Here's a snippet of the error that is coming:

Code: Select all

36c.37c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\kernel32.dll)
36c.37c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\kernel32.dll
36c.37c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000000801:<flags> [calling]
36c.37c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
36c.37c: supR3HardenedDllNotificationCallback: load   00007ff9426f0000 LB 0x00115000 C:\WINDOWS\system32\KERNELBASE.dll [fFlags=0x0]
36c.37c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\KernelBase.dll)
36c.37c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\KernelBase.dll
36c.37c: supR3HardenedDllNotificationCallback: load   00007ff945220000 LB 0x0013e000 C:\WINDOWS\system32\KERNEL32.DLL [fFlags=0x0]
36c.37c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
36c.37c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff945220000 'C:\WINDOWS\system32\KERNEL32.DLL'
36c.37c: supR3HardenedDllNotificationCallback: load   00007ff799040000 LB 0x00108000 C:\Program Files\Oracle\VirtualBox\VirtualBox.exe [fFlags=0x0]
In the below screenshot, I was trying to open a Ubuntu 14.10 VM that I'd originally created using Virtualbox 4.3.12. The same error occurs when I try to create a fresh VM in VB 4.3.26 as well.
VBoxError
VBoxError
VBoxError.png (15.94 KiB) Viewed 9611 times
Currently, I have to go all the way back to 4.3.12 to not see this error. Although I have to admit I haven't tried out every intermediate build between 12 and 26. I'll gladly provide any other information about my system setup as necessary. Additionally, I haven't gone back through this thread history to see whether my current problem has been faced and resolved before as well. Apologies if it already has.
numb3rs666
Posts: 22
Joined: 30. Dec 2013, 18:14

Re: Windows 4.3.26 Specifically for errors due to Security

Post by numb3rs666 »

Finally Ver 4.3.27-99293 work well here.
Before of this last test build the last version working was 4.3.24-98716


Host Win 8.1 x64
Security: Comodo
Guest: Win 8.1 x64

Thanks
Docfxit
Posts: 129
Joined: 23. May 2014, 12:35
Primary OS: MS Windows 7
VBox Version: PUEL
Guest OSses: XP Pro, Win7, Win10

Re: Windows 4.3.26 Specifically for errors due to Security

Post by Docfxit »

I uninstalled the previous version.
Cleaned out temp files.
Re-booted.

After installing 4.3.27 With Run As administrator, Re-boot, I'm getting an error before the program starts.

Image
No startup log created.
Host: Win7 sp1 32bit
Client: XP Pro sp3
Antivirus: Bitdefender 2015
Malwarebytes installed and not running
Firewall: ZoneAlarm

Thank you,
Docfxit
mpack
Site Moderator
Posts: 39156
Joined: 4. Sep 2008, 17:09
Primary OS: MS Windows 10
VBox Version: PUEL
Guest OSses: Mostly XP

Re: Windows 4.3.26 Specifically for errors due to Security

Post by mpack »

@Docfxit - what made you conclude this was a security issue? And where is the startup log per the first message of this topic?
Locked